File Security

[Dustin Breese]

This has probably been asked before, so please forgive.  (I couldn't find a
way to search past discussions on houseoffusion.com.)

My question is: what keeps a web-user from typing in the exact path of a QRY
or ACT file or any other file in your application other than index.cfm?  One
approach that my collegue uses is to give any "CFINCLUDED" files a ".INC"
filename extension and then map .INC to a null device so the web server
doesn't allow access to it.

What have you done in the past?

Thanks,
Dustin


------------------------------------------------------------------------------
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/fusebox or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.